> Markdown version of [/jobs/ext/2369297-formal-modeling-of-clock-glitch-attacks-for-security-verification-of-processors-h-f](https://www.wearedevelopers.com/jobs/ext/2369297-formal-modeling-of-clock-glitch-attacks-for-security-verification-of-processors-h-f). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Formal Modeling Of Clock Glitch Attacks For Security Verification Of Processors H/F - **Company:** CEA Industrie - **Location:** Grenoble, France - **Contract:** Permanent contract - **Skills:** Embedded Software, Hardware Design, Information Technology - **Published:** August 11, 2026 - **Apply:** https://www.hellowork.com/fr-fr/emplois/82548271.html ## About the Role Applicants should hold a PhD in computer science, electrical engineering, embedded systems, or a related field.Strong candidates will have experience in one or more of the following areas:hardware security and fault injection attacks,formal methods and verification,RTL design and digital circuits,processor architectures (RISC-V experience is a plus),embedded software.The position offers an opportunity to work at the intersection of hardware security, formal methods, and secure processor design, combining theoretical research with experimental validation.Location: CEA-List (Grenoble or Paris-Saclay)Duration: 12 months with possible extensionsKeywords: Hardware security · Clock glitch attacks · Fault injection · Formal verification · RISC-V · Secure processors · Embedded systems · RTL analysis, Applicants should hold a PhD in computer science, electrical engineering, embedded systems, or a related field. Strong candidates will have experience in one or more of the following areas: hardware security and fault injection attacks, formal methods and verification, RTL design and digital circuits, processor architectures (RISC-V experience is a plus), embedded software. The position offers an opportunity to work at the intersection of hardware security, formal methods, and secure processor design, combining theoretical research with experimental validation. ## Description La conscience des responsabilités - La coopération - La curiosité Research context Embedded processors are increasingly deployed in security-critical applications, making their protection against physical attacks a major challenge. Among these threats, clock glitch attacks remain a powerful and accessible fault injection technique, especially relevant for IoT and embedded systems due to their low-cost implementation. Recent research at Inria Rennes led to the development of TRAITOR [1-2], an experimental platform capable of generating synchronous clock perturbations and characterizing their impact on processor microarchitectures. These experiments suggest that clock glitches induce sampling faults on sensitive sequential elements, but the corresponding fault models remain to be formally validated. In parallel, CEA-List has developed µArchiFI [3-4], a formal framework enabling pre-silicon analysis of fault injection effects at RTL level, from hardware implementation details up to software execution. While µArchiFI currently supports fault models representative of laser-based attacks, formal modeling of clock glitch effects remains an open challenge. Research objective and activities The goal of this postdoctoral project is to develop the first formal methodology for analyzing processor robustness against clock glitch attacks by combining experimental characterization of clock glitches using the TRAITOR platform, and formal verification of their impact using the µArchiFI framework. The project will establish a bridge between physical fault injection experiments and formal security verification, enabling rigorous evaluation of hardware/software countermeasures. The postdoctoral researcher will contribute to the following tasks: - Formal modeling of clock glitch effects. Develop a discrete fault model suitable for formal verification, based on the Energy Threshold Fault Model (ETFM) and experimental observations. The objective is to represent the effects of clock-induced sampling faults while maintaining the scalability of formal analysis. - Experimental validation of fault models. Conduct clock glitch injection campaigns using TRAITOR and compare experimental results with µArchiFI predictions. This iterative approach will refine and validate the formal models. - Security analysis of protected processors. Apply the developed methodology to secure embedded processors such as RISC-V CV32E40S and OpenTitan Secure Ibex. The analysis will identify potential vulnerabilities and evaluate the effectiveness of hardware/software countermeasures against clock glitch attacks. Research environment The researcher will join a joint effort between CEA-List (Grenoble, Saclay) and Inria Rennes (PACAP team), combining expertise in: hardware security, fault injection attacks, processor microarchitecture analysis, formal verification, embedded systems, numerical systems designs. The project builds on complementary developments from both teams: TRAITOR for experimental fault injection and µArchiFI for formal securi ## Related Videos - [Building a hypercar from scratch](https://www.wearedevelopers.com/videos/607-building-a-hypercar-from-scratch) - [Quantum Computing - The tiny and the big challenges](https://www.wearedevelopers.com/videos/934-quantum-computing-the-tiny-and-the-big-challenges) - [When testing just doesn’t cut it](https://www.wearedevelopers.com/videos/720-when-testing-just-doesn-t-cut-it) - [Enabling intelligent logistics automation: home-grown Industrial IoT platform at Austrian Post](https://www.wearedevelopers.com/videos/2018-enabling-intelligent-logistics-automation-home-grown-industrial-iot-platform-at-austrian-post) - [It's not easy being green](https://www.wearedevelopers.com/videos/558-it-s-not-easy-being-green) - [Quantum DevOps - Quantum Application Development](https://www.wearedevelopers.com/videos/1441-quantum-devops-quantum-application-development) ## Related Articles - [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs) - [Résumé-Driven Development: How IT trends affect the job market for software developers](https://www.wearedevelopers.com/magazine/59-resume-driven-development-how-it-trends-affect-the-job-market-for-software-developers)